General
-
Target
e4b4514fa47148d29d64a48c178a89d780c963d1ca02fc1191163ea3a4c9bf3a.exe
-
Size
707KB
-
MD5
52a4ad5c9d17336ed202c1d4f9b323c7
-
SHA1
64c44d987c55acc51e652d23fadacfd3ccb2e684
-
SHA256
e4b4514fa47148d29d64a48c178a89d780c963d1ca02fc1191163ea3a4c9bf3a
-
SHA512
3f6cd44fa2e17b04f4aa9d593ccc9d91dfc775a7f3b68b62e1cf8bcc2cc915e57d71c462134bf2baf7caf4ae7203d0fa26c5de75ac662b4709e53cd8af4f1d49
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178lvnh:6uaTmkZJ+naie5OTamgEoKxLWKBh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e4b4514fa47148d29d64a48c178a89d780c963d1ca02fc1191163ea3a4c9bf3a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections